last executing test programs: 2.543800237s ago: executing program 0 (id=384): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005000040"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) 2.290326306s ago: executing program 0 (id=388): connect$auto(0x3, 0x0, 0x55) 2.072735519s ago: executing program 0 (id=391): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x4, 0x0, 0x1, 0xa508}, 0x800}, 0x7, 0x6) 1.756734418s ago: executing program 3 (id=394): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000080)={0x0, 0x6}, 0x26, 0x0, 0x6, 0x0) readv$auto(0x3, 0x0, 0x6) 1.62211655s ago: executing program 3 (id=396): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ubi/parameters/mtd\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 1.450859327s ago: executing program 3 (id=399): r0 = socket(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0x2, 0x100) 1.323660828s ago: executing program 3 (id=400): mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6e}, 0x1, 0x0, 0x0, 0x44800}, 0x40080c8) 1.056777654s ago: executing program 0 (id=403): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) 983.94567ms ago: executing program 1 (id=404): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000080)={0x0, 0x6}, 0x26, 0x0, 0x6, 0x0) readv$auto(0x3, 0x0, 0x6) 946.372424ms ago: executing program 3 (id=405): ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) 766.648027ms ago: executing program 1 (id=407): r0 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x6, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) write$auto(r0, &(0x7f0000000000)='*\x00', 0xfd) 716.942346ms ago: executing program 2 (id=408): r0 = socket(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0x2, 0x100) 708.953631ms ago: executing program 0 (id=409): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005000040"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) 582.610593ms ago: executing program 1 (id=410): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(r0, 0x0, 0x68) listen$auto(0x3, 0x81) 563.161299ms ago: executing program 0 (id=411): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x4, 0x0, 0x1, 0xa508}, 0x800}, 0x7, 0x6) 535.077501ms ago: executing program 2 (id=412): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r0 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 404.048765ms ago: executing program 1 (id=413): mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6e}, 0x1, 0x0, 0x0, 0x44800}, 0x40080c8) 403.447062ms ago: executing program 2 (id=414): read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) 240.754351ms ago: executing program 2 (id=415): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 197.573165ms ago: executing program 1 (id=416): r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x60840, 0x0) read$auto(r0, 0x0, 0x80000000) 158.947366ms ago: executing program 2 (id=417): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r0, &(0x7f00000001c0)='/dev/raw-gadget\x00', 0x3) 32.776121ms ago: executing program 1 (id=418): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/afs/addr_prefs\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)="3bedd92f26638cc0023a8686bd579dcf16f50e9bfa20abfa3a3753ca", 0x1c) 32.700249ms ago: executing program 2 (id=419): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/op_timeout_secs\x00', 0x464d03, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x60840, 0x0) write$auto(0x3, 0x0, 0xffd8) 0s ago: executing program 3 (id=420): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. syzkaller login: [ 85.548413][ T5821] cgroup: Unknown subsys name 'net' [ 85.660528][ T5821] cgroup: Unknown subsys name 'cpuset' [ 85.672463][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.441464][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.685360][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.703819][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.705454][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.714092][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.720512][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.734781][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.737399][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.752768][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.753802][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.760978][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.763176][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.770658][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.790164][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.797928][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.799497][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.807984][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.814700][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.822294][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.839091][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.847643][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.860079][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.876304][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.885130][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.896379][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.326527][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.367878][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.394294][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.497506][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.632260][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.640607][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.654799][ T5830] bridge_slave_0: entered allmulticast mode [ 90.663530][ T5830] bridge_slave_0: entered promiscuous mode [ 90.675941][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.684657][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.692410][ T5831] bridge_slave_0: entered allmulticast mode [ 90.702622][ T5831] bridge_slave_0: entered promiscuous mode [ 90.724706][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.734139][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.744742][ T5830] bridge_slave_1: entered allmulticast mode [ 90.752557][ T5830] bridge_slave_1: entered promiscuous mode [ 90.763499][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.772572][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.781834][ T5831] bridge_slave_1: entered allmulticast mode [ 90.789802][ T5831] bridge_slave_1: entered promiscuous mode [ 90.809122][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.819395][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.827751][ T5834] bridge_slave_0: entered allmulticast mode [ 90.835481][ T5834] bridge_slave_0: entered promiscuous mode [ 90.898879][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.916297][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.928651][ T5834] bridge_slave_1: entered allmulticast mode [ 90.938321][ T5834] bridge_slave_1: entered promiscuous mode [ 90.952058][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.961752][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.973111][ T5832] bridge_slave_0: entered allmulticast mode [ 90.984984][ T5832] bridge_slave_0: entered promiscuous mode [ 91.010361][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.030098][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.053609][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.063804][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.072714][ T5832] bridge_slave_1: entered allmulticast mode [ 91.080820][ T5832] bridge_slave_1: entered promiscuous mode [ 91.090138][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.112843][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.177909][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.194765][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.224887][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.243420][ T5830] team0: Port device team_slave_0 added [ 91.256210][ T5830] team0: Port device team_slave_1 added [ 91.268619][ T5831] team0: Port device team_slave_0 added [ 91.303330][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.342417][ T5831] team0: Port device team_slave_1 added [ 91.365637][ T5834] team0: Port device team_slave_0 added [ 91.409120][ T5834] team0: Port device team_slave_1 added [ 91.435565][ T5832] team0: Port device team_slave_0 added [ 91.446432][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.456401][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.491942][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.531943][ T5832] team0: Port device team_slave_1 added [ 91.539359][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.547771][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.580288][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.600545][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.609010][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.639687][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.654565][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.664302][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.700995][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.738827][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.748825][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.791905][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.806775][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.818569][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.860076][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.875166][ T5841] Bluetooth: hci3: command tx timeout [ 91.888743][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.899678][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.917654][ T5143] Bluetooth: hci2: command tx timeout [ 91.939417][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.946411][ T5841] Bluetooth: hci1: command tx timeout [ 91.984826][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.996054][ T5841] Bluetooth: hci0: command tx timeout [ 92.007981][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.048739][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.108469][ T5830] hsr_slave_0: entered promiscuous mode [ 92.119836][ T5830] hsr_slave_1: entered promiscuous mode [ 92.174652][ T5831] hsr_slave_0: entered promiscuous mode [ 92.185550][ T5831] hsr_slave_1: entered promiscuous mode [ 92.194368][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.209342][ T5831] Cannot create hsr debugfs directory [ 92.237225][ T5834] hsr_slave_0: entered promiscuous mode [ 92.254931][ T5834] hsr_slave_1: entered promiscuous mode [ 92.263046][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.282613][ T5834] Cannot create hsr debugfs directory [ 92.389289][ T5832] hsr_slave_0: entered promiscuous mode [ 92.399905][ T5832] hsr_slave_1: entered promiscuous mode [ 92.416393][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.430075][ T5832] Cannot create hsr debugfs directory [ 93.164112][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.185594][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.207232][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.225168][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.287347][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.311500][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.335290][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.365355][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.444246][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.471127][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.497222][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.513977][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.615010][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.658382][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.672562][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.683717][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.703961][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.717734][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.740845][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.748973][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.801747][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.809205][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.854227][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.880379][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.918076][ T5841] Bluetooth: hci3: command tx timeout [ 93.931190][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.964649][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.976549][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.992824][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.999802][ T5841] Bluetooth: hci1: command tx timeout [ 93.999850][ T5841] Bluetooth: hci2: command tx timeout [ 94.014623][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.021894][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.048801][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.056168][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.076701][ T5143] Bluetooth: hci0: command tx timeout [ 94.080601][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.089907][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.123513][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.131232][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.317216][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.375057][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.418064][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.425845][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.452988][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.460664][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.534336][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.699278][ T5831] veth0_vlan: entered promiscuous mode [ 94.745673][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.784402][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.804657][ T5831] veth1_vlan: entered promiscuous mode [ 94.887467][ T5831] veth0_macvtap: entered promiscuous mode [ 94.904896][ T5830] veth0_vlan: entered promiscuous mode [ 94.929823][ T5831] veth1_macvtap: entered promiscuous mode [ 94.950739][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.959045][ T5832] veth0_vlan: entered promiscuous mode [ 94.968213][ T5830] veth1_vlan: entered promiscuous mode [ 94.986557][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.006333][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.027263][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.037648][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.047776][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.057561][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.071280][ T5832] veth1_vlan: entered promiscuous mode [ 95.210146][ T5830] veth0_macvtap: entered promiscuous mode [ 95.227347][ T5834] veth0_vlan: entered promiscuous mode [ 95.235583][ T5832] veth0_macvtap: entered promiscuous mode [ 95.245728][ T5830] veth1_macvtap: entered promiscuous mode [ 95.257481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.265541][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.268250][ T5832] veth1_macvtap: entered promiscuous mode [ 95.311035][ T5834] veth1_vlan: entered promiscuous mode [ 95.331650][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.343783][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.355372][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.383125][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.395180][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.407219][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.417535][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.418458][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.432372][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.452383][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.462432][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.473074][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.484198][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.505119][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.518260][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.533006][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.543788][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.555336][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.571672][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.580692][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.590017][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.600525][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.624278][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.642959][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.656061][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.666624][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.675378][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.694791][ T5834] veth0_macvtap: entered promiscuous mode [ 95.709804][ T5834] veth1_macvtap: entered promiscuous mode [ 95.848392][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.860427][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.871016][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.882459][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.893670][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.904544][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.918901][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.948798][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.969202][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.000242][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.019453][ T5143] Bluetooth: hci3: command tx timeout [ 96.032741][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.043451][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.054178][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.064276][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.075012][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.088471][ T5143] Bluetooth: hci2: command tx timeout [ 96.088535][ T5841] Bluetooth: hci1: command tx timeout [ 96.095154][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.133614][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.154953][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.158500][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.173664][ T5841] Bluetooth: hci0: command tx timeout [ 96.176057][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.188849][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.205983][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.206737][ T5899] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.375521][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.393551][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.500707][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.527271][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.560667][ T5905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.567402][ T5905] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.601015][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.631835][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.862899][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.872710][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.311993][ T8] cfg80211: failed to load regulatory.db [ 97.570061][ T5929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.082511][ T5841] Bluetooth: hci3: command tx timeout [ 98.156095][ T5841] Bluetooth: hci1: command tx timeout [ 98.156991][ T5143] Bluetooth: hci2: command tx timeout [ 98.186686][ T29] audit: type=1800 audit(1734111989.752:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21" name="dbroot" dev="configfs" ino=7694 res=0 errno=0 [ 98.226171][ T29] audit: type=1804 audit(1734111989.782:3): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.21" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=7694 res=1 errno=0 [ 98.260105][ T5143] Bluetooth: hci0: command tx timeout [ 98.731772][ T5958] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 98.740792][ T5958] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 98.751866][ T5958] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 98.761754][ T5958] netlink: 10 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.772055][ T5958] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 100.161797][ T6000] binder_alloc: binder_alloc_mmap_handler: 5999 20ffc000-20ffd000 already mapped failed -16 [ 101.274205][ T6036] netlink: 252 bytes leftover after parsing attributes in process `syz.3.61'. [ 101.901265][ T6058] ======================================================= [ 101.901265][ T6058] WARNING: The mand mount option has been deprecated and [ 101.901265][ T6058] and is ignored by this kernel. Remove the mand [ 101.901265][ T6058] option from the mount to silence this warning. [ 101.901265][ T6058] ======================================================= [ 102.116603][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.159413][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.178881][ T6063] Zero length message leads to an empty skb [ 102.561156][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 102.574618][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 103.236386][ T6100] kafs: addr_prefs: Invalid Command [ 104.874501][ T6155] netlink: 342 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.640148][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 106.656387][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 107.993279][ T6256] netlink: 342 bytes leftover after parsing attributes in process `syz.0.163'. [ 108.697055][ T6284] netlink: 342 bytes leftover after parsing attributes in process `syz.1.175'. [ 109.330898][ T6303] netlink: 342 bytes leftover after parsing attributes in process `syz.2.184'. [ 110.148607][ T6333] netlink: 342 bytes leftover after parsing attributes in process `syz.3.195'. [ 110.933696][ T6355] netlink: 342 bytes leftover after parsing attributes in process `syz.2.206'. [ 111.972141][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 111.986609][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 112.581428][ T6411] netlink: 342 bytes leftover after parsing attributes in process `syz.3.230'. [ 114.309483][ T6468] netlink: 342 bytes leftover after parsing attributes in process `syz.2.254'. [ 114.391039][ T6470] mkiss: ax0: crc mode is auto. [ 114.956600][ T6487] netlink: 334 bytes leftover after parsing attributes in process `syz.3.262'. [ 115.261111][ T6496] mkiss: ax0: crc mode is auto. [ 115.727479][ T6508] netlink: 334 bytes leftover after parsing attributes in process `syz.3.272'. [ 116.231522][ T6521] mkiss: ax0: crc mode is auto. [ 116.519503][ T6531] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 116.536004][ T6531] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 117.340802][ T6558] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 117.348933][ T6558] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 117.453999][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 117.814384][ T6573] netlink: 334 bytes leftover after parsing attributes in process `syz.0.302'. [ 118.587085][ T6601] netlink: 334 bytes leftover after parsing attributes in process `syz.0.311'. [ 119.215299][ T6621] proc: Unknown parameter 'e - devpts devpts rw' [ 120.270541][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 120.594755][ T6669] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 120.613057][ T6669] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 120.683044][ T6671] netlink: 252 bytes leftover after parsing attributes in process `syz.0.344'. [ 120.965460][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 121.261584][ T6692] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 121.270387][ T6692] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 121.996321][ T6716] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 122.004956][ T6716] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 122.695666][ T6737] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 122.725943][ T6737] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 123.777775][ T6774] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 123.806914][ T6774] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 124.658104][ T6807] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 124.678301][ T6807] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 126.011304][ T6856] netlink: 342 bytes leftover after parsing attributes in process `syz.2.415'. [ 126.256441][ T6862] ================================================================== [ 126.264585][ T6862] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x123b/0x14e0 [ 126.273346][ T6862] Read of size 1 at addr ffff88802fd2ec1d by task syz.1.418/6862 [ 126.281117][ T6862] [ 126.283496][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.1.418 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 126.294143][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 126.304266][ T6862] Call Trace: [ 126.307592][ T6862] [ 126.310580][ T6862] dump_stack_lvl+0x116/0x1f0 [ 126.315331][ T6862] print_report+0xc3/0x620 [ 126.319815][ T6862] ? __virt_addr_valid+0x5e/0x590 [ 126.324907][ T6862] ? __phys_addr+0xc6/0x150 [ 126.329474][ T6862] kasan_report+0xd9/0x110 [ 126.333934][ T6862] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 126.339997][ T6862] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 126.346035][ T6862] afs_proc_addr_prefs_write+0x123b/0x14e0 [ 126.351903][ T6862] ? find_held_lock+0x2d/0x110 [ 126.356710][ T6862] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 126.362914][ T6862] ? __might_fault+0x13b/0x190 [ 126.367722][ T6862] ? __pfx_lock_release+0x10/0x10 [ 126.372793][ T6862] ? trace_lock_acquire+0x14e/0x1f0 [ 126.378044][ T6862] ? lock_acquire+0x2f/0xb0 [ 126.382584][ T6862] ? proc_simple_write+0x114/0x1b0 [ 126.387742][ T6862] proc_simple_write+0x114/0x1b0 [ 126.392722][ T6862] ? __pfx_proc_simple_write+0x10/0x10 [ 126.398338][ T6862] proc_reg_write+0x23d/0x330 [ 126.403161][ T6862] ? __pfx_proc_reg_write+0x10/0x10 [ 126.408417][ T6862] vfs_write+0x24c/0x1150 [ 126.412790][ T6862] ? __fget_files+0x1fc/0x3a0 [ 126.417512][ T6862] ? __pfx___mutex_lock+0x10/0x10 [ 126.422587][ T6862] ? __pfx_vfs_write+0x10/0x10 [ 126.427392][ T6862] ? __fget_files+0x206/0x3a0 [ 126.432133][ T6862] ksys_write+0x12b/0x250 [ 126.436494][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 126.441380][ T6862] do_syscall_64+0xcd/0x250 [ 126.445919][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.452033][ T6862] RIP: 0033:0x7f1d9cd85d19 [ 126.456484][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.476137][ T6862] RSP: 002b:00007f1d9dbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.484583][ T6862] RAX: ffffffffffffffda RBX: 00007f1d9cf75fa0 RCX: 00007f1d9cd85d19 [ 126.492583][ T6862] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 126.500576][ T6862] RBP: 00007f1d9ce01a20 R08: 0000000000000000 R09: 0000000000000000 [ 126.508573][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.516568][ T6862] R13: 0000000000000000 R14: 00007f1d9cf75fa0 R15: 00007ffe10f40238 [ 126.524569][ T6862] [ 126.527605][ T6862] [ 126.529937][ T6862] Allocated by task 6862: [ 126.534274][ T6862] kasan_save_stack+0x33/0x60 [ 126.539013][ T6862] kasan_save_track+0x14/0x30 [ 126.543735][ T6862] __kasan_kmalloc+0xaa/0xb0 [ 126.548365][ T6862] __kmalloc_node_track_caller_noprof+0x21d/0x520 [ 126.554826][ T6862] memdup_user_nul+0x2b/0x110 [ 126.559542][ T6862] proc_simple_write+0xc7/0x1b0 [ 126.564437][ T6862] proc_reg_write+0x23d/0x330 [ 126.569142][ T6862] vfs_write+0x24c/0x1150 [ 126.573498][ T6862] ksys_write+0x12b/0x250 [ 126.577881][ T6862] do_syscall_64+0xcd/0x250 [ 126.582417][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.588371][ T6862] [ 126.590709][ T6862] The buggy address belongs to the object at ffff88802fd2ec00 [ 126.590709][ T6862] which belongs to the cache kmalloc-32 of size 32 [ 126.604607][ T6862] The buggy address is located 0 bytes to the right of [ 126.604607][ T6862] allocated 29-byte region [ffff88802fd2ec00, ffff88802fd2ec1d) [ 126.619118][ T6862] [ 126.621458][ T6862] The buggy address belongs to the physical page: [ 126.627888][ T6862] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fd2e [ 126.636670][ T6862] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.643795][ T6862] page_type: f5(slab) [ 126.647805][ T6862] raw: 00fff00000000000 ffff88801ac41780 dead000000000100 dead000000000122 [ 126.656411][ T6862] raw: 0000000000000000 0000000080400040 00000001f5000000 0000000000000000 [ 126.665020][ T6862] page dumped because: kasan: bad access detected [ 126.671466][ T6862] page_owner tracks the page as allocated [ 126.677195][ T6862] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5182, tgid 5182 (hostname), ts 35718472211, free_ts 34050246423 [ 126.695027][ T6862] post_alloc_hook+0x2d1/0x350 [ 126.699833][ T6862] get_page_from_freelist+0xfce/0x2f80 [ 126.705356][ T6862] __alloc_pages_noprof+0x223/0x25b0 [ 126.710673][ T6862] alloc_pages_mpol_noprof+0x2c9/0x610 [ 126.716198][ T6862] new_slab+0x2c9/0x410 [ 126.720399][ T6862] ___slab_alloc+0xce2/0x1650 [ 126.725107][ T6862] __slab_alloc.constprop.0+0x56/0xb0 [ 126.730602][ T6862] __kmalloc_cache_noprof+0xf6/0x420 [ 126.735918][ T6862] kmem_cache_free+0x2ef/0x4c0 [ 126.740731][ T6862] __put_anon_vma+0x114/0x3a0 [ 126.745438][ T6862] unlink_anon_vmas+0x58a/0x820 [ 126.750320][ T6862] free_pgtables+0x33c/0x950 [ 126.754935][ T6862] exit_mmap+0x3d7/0xb20 [ 126.759205][ T6862] __mmput+0x12a/0x4c0 [ 126.763302][ T6862] mmput+0x62/0x70 [ 126.767052][ T6862] do_exit+0x9bf/0x2d70 [ 126.771240][ T6862] page last free pid 1 tgid 1 stack trace: [ 126.777058][ T6862] free_unref_page+0x661/0x1080 [ 126.781951][ T6862] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 126.787699][ T6862] __apply_to_page_range+0x5fd/0xd30 [ 126.793012][ T6862] kasan_release_vmalloc+0xd1/0xe0 [ 126.798153][ T6862] purge_vmap_node+0x1d1/0xa40 [ 126.803285][ T6862] __purge_vmap_area_lazy+0x9bf/0xc10 [ 126.808681][ T6862] _vm_unmap_aliases+0x448/0x670 [ 126.813638][ T6862] change_page_attr_set_clr+0x240/0x480 [ 126.819226][ T6862] set_memory_nx+0xb6/0x110 [ 126.823760][ T6862] free_init_pages+0x79/0xd0 [ 126.828381][ T6862] free_kernel_image_pages+0x24/0x50 [ 126.833694][ T6862] kernel_init+0x30/0x2b0 [ 126.838062][ T6862] ret_from_fork+0x45/0x80 [ 126.842526][ T6862] ret_from_fork_asm+0x1a/0x30 [ 126.847497][ T6862] [ 126.849832][ T6862] Memory state around the buggy address: [ 126.855472][ T6862] ffff88802fd2eb00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 126.863550][ T6862] ffff88802fd2eb80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 126.871630][ T6862] >ffff88802fd2ec00: 00 00 00 05 fc fc fc fc fa fb fb fb fc fc fc fc [ 126.879703][ T6862] ^ [ 126.884562][ T6862] ffff88802fd2ec80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 126.892656][ T6862] ffff88802fd2ed00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 126.900743][ T6862] ================================================================== [ 127.002140][ T6862] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.009637][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.1.418 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 127.020295][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 127.030413][ T6862] Call Trace: [ 127.033742][ T6862] [ 127.036708][ T6862] dump_stack_lvl+0x3d/0x1f0 [ 127.041355][ T6862] panic+0x71d/0x800 [ 127.045325][ T6862] ? __pfx_panic+0x10/0x10 [ 127.049813][ T6862] ? irqentry_exit+0x3b/0x90 [ 127.054460][ T6862] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.059717][ T6862] ? preempt_schedule_thunk+0x1a/0x30 [ 127.065159][ T6862] ? preempt_schedule_common+0x44/0xc0 [ 127.070690][ T6862] check_panic_on_warn+0xab/0xb0 [ 127.075702][ T6862] end_report+0x117/0x180 [ 127.080100][ T6862] kasan_report+0xe9/0x110 [ 127.084577][ T6862] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 127.090685][ T6862] ? afs_proc_addr_prefs_write+0x123b/0x14e0 [ 127.096704][ T6862] afs_proc_addr_prefs_write+0x123b/0x14e0 [ 127.102566][ T6862] ? find_held_lock+0x2d/0x110 [ 127.107376][ T6862] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 127.113569][ T6862] ? __might_fault+0x13b/0x190 [ 127.118366][ T6862] ? __pfx_lock_release+0x10/0x10 [ 127.123426][ T6862] ? trace_lock_acquire+0x14e/0x1f0 [ 127.128663][ T6862] ? lock_acquire+0x2f/0xb0 [ 127.133232][ T6862] ? proc_simple_write+0x114/0x1b0 [ 127.138379][ T6862] proc_simple_write+0x114/0x1b0 [ 127.143351][ T6862] ? __pfx_proc_simple_write+0x10/0x10 [ 127.148841][ T6862] proc_reg_write+0x23d/0x330 [ 127.153548][ T6862] ? __pfx_proc_reg_write+0x10/0x10 [ 127.158785][ T6862] vfs_write+0x24c/0x1150 [ 127.163183][ T6862] ? __fget_files+0x1fc/0x3a0 [ 127.167938][ T6862] ? __pfx___mutex_lock+0x10/0x10 [ 127.173036][ T6862] ? __pfx_vfs_write+0x10/0x10 [ 127.177855][ T6862] ? __fget_files+0x206/0x3a0 [ 127.182557][ T6862] ksys_write+0x12b/0x250 [ 127.186944][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 127.191820][ T6862] do_syscall_64+0xcd/0x250 [ 127.196625][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.202550][ T6862] RIP: 0033:0x7f1d9cd85d19 [ 127.207076][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.226727][ T6862] RSP: 002b:00007f1d9dbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.235174][ T6862] RAX: ffffffffffffffda RBX: 00007f1d9cf75fa0 RCX: 00007f1d9cd85d19 [ 127.243189][ T6862] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 127.251188][ T6862] RBP: 00007f1d9ce01a20 R08: 0000000000000000 R09: 0000000000000000 [ 127.259207][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.267197][ T6862] R13: 0000000000000000 R14: 00007f1d9cf75fa0 R15: 00007ffe10f40238 [ 127.275231][ T6862] [ 127.278576][ T6862] Kernel Offset: disabled [ 127.282956][ T6862] Rebooting in 86400 seconds..